Behavioral task
behavioral1
Sample
街头篮球爱丽丝辅助 V6.5(注册送20分钟使用时间).exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
街头篮球爱丽丝辅助 V6.5(注册送20分钟使用时间).exe
Resource
win10v2004-20220901-en
General
-
Target
486f840b085532494380153433012f61f88a98e58a0e1af922a628371b9a5c7d
-
Size
2.1MB
-
MD5
eeace8d12df1f88884ca27e7cba79644
-
SHA1
294dc469c1579ca744b771ddc5dc8968db969f75
-
SHA256
486f840b085532494380153433012f61f88a98e58a0e1af922a628371b9a5c7d
-
SHA512
5b72a8f9a43df071fd174b3b3753b553b1883ff70e74c57dc5e53d164d67c3ba69d892919c324a7405d7d567fad2c18d2fd97028be40b3d09e8a7bad84358e46
-
SSDEEP
49152:NGSGJCSqfN8yAKroTd4vxaGxGpwxSoWVpRw1ygJHlxXXEQ1dE+CVvps:NddS+CyA0oTy2pwxS/LMpFxnxE+CTs
Malware Config
Signatures
-
resource yara_rule static1/unpack001/街头篮球爱丽丝辅助 V6.5(注册送20分钟使用时间).exe vmprotect
Files
-
486f840b085532494380153433012f61f88a98e58a0e1af922a628371b9a5c7d.zip
-
下载说明.htm.html .js
-
街头篮球爱丽丝辅助 V6.5(注册送20分钟使用时间).exe.exe windows x86
f0bd42a545762f40ebd8c10d76ed312b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasGetConnectStatusA
winmm
waveOutWrite
ws2_32
WSAAsyncSelect
kernel32
lstrcmpiA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
WinHelpA
gdi32
MoveToEx
winspool.drv
ClosePrinter
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ord17
wininet
InternetSetOptionA
comdlg32
GetOpenFileNameA
Sections
.text Size: - Virtual size: 454KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 557KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE